# Microsoft patches October 2022 vulnerabilities

Published: 2022-10-11 · Severity: high · Sectors: government-national, technology
Canonical: https://vorant.io/reports/d67b84e4-8460-5009-8e7c-b46f2432b586/microsoft-patches-october-2022-vulnerabilities

> Microsoft releases security patches including CVE-2022-41033, which is being actively exploited in the wild.

On October 12, 2022 (Japan Standard Time), Microsoft released security patches addressing multiple vulnerabilities in Microsoft products. The IPA (Information-technology Promotion Agency, Japan) alert identifies CVE-2022-41033 as actively exploited, with Microsoft confirming in-the-wild abuse. Exploitation of these vulnerabilities could result in application crashes, arbitrary code execution, or complete system compromise. The alert emphasizes urgent patching via Windows Update to prevent escalating compromise. No additional technical details on affected products or exploitation vectors are specified in this advisory.

## Mentioned in this report

- Vulnerabilities: CVE-2022-41033 (KEV)

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2022/1012-ms.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/d67b84e4-8460-5009-8e7c-b46f2432b586/microsoft-patches-october-2022-vulnerabilities.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup